CVE-2024-25021

Published: Feb 22, 2024Modified: Jun 17, 2026

8.4

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.5 / Impact: 5.9

Source: psirt@us.ibm.com (Secondary)

Description

IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary commands. IBM X-Force ID: 281320.

Affected (2)

Products: Ibm: Aix, Vios

Ibm

2 products

Aix

Vios

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 7.3
Ibm Vios	Version 4.1

Related CWEs

CWE-114

Process Control

Executing commands or loading libraries from an untrusted source or in an untrusted environment can cause an application to execute malicious commands (and payloads) on behalf of an attacker.

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/281320

Source: psirt@us.ibm.com

Vendor Advisory

https://www.ibm.com/support/pages/node/7122628

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/281320

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.ibm.com/support/pages/node/7122628

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.